3.4 Describe Network, Application, and Data Security in Cloud Environments with Solutions Such as Cisco Multicloud Defense and Cisco Secure Workload 350-701 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   How does Cisco Multicloud Defense help protect data in cloud environments?

   • ABy providing encryption key management services
   • BBy providing physical data center security
   • CBy automatically encrypting all data at rest
   • DBy enforcing policies that control traffic and access to data, and by inspecting traffic for sensitive data
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security architect needs to implement micro-segmentation for a large Kubernetes cluster running in a private cloud. The team wants to automatically discover which workloads communicate with each other and then enforce least-privilege policies based on that observed behavior. Which Cisco solution should the architect choose?

   • ANative Kubernetes Network Policies with manual CIDR-based rules.
   • BA traditional perimeter firewall with VLAN segmentation.
   • CCisco Secure Workload with application dependency mapping and policy enforcement agents.
   • DCisco Multicloud Defense with distributed cloud gateways.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary purpose of a cloud key management service (KMS)?

   • ATo filter network traffic between cloud resources
   • BTo centrally manage the lifecycle of encryption keys used to protect data
   • CTo monitor user activity and detect anomalies in the cloud environment
   • DTo provide single sign-on for cloud applications
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company has a mix of modern containerized workloads and legacy VMs in a private cloud. They are implementing micro-segmentation with Cisco Secure Workload. The security team wants to enforce policies for both types of workloads. However, the legacy VMs cannot have agents installed. Which approach should be used to enforce policies for the legacy VMs?

   • AUse agent-based enforcement on the legacy VMs.
   • BMigrate the legacy VMs to containers to enable agent-based enforcement.
   • CUse a separate firewall for the legacy VMs and manage it independently.
   • DUse network-based enforcement via the virtual switch or hypervisor for the legacy VMs.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company is moving its customer relationship management (CRM) system to a public cloud. The system contains personally identifiable information (PII). The security team is reviewing the shared responsibility model to determine who is responsible for patching the operating system of the virtual machines running the CRM. Who is responsible for this task?

   • AThe customer and the provider share equal responsibility for OS patching.
   • BThe cloud provider, because they manage the physical infrastructure.
   • CThe cloud provider, because they are responsible for all security in the cloud.
   • DThe customer, because they are responsible for securing the guest operating system.
   Reveal Solution Discussion Select an answer first